Privacy Policy

Serendipity Wellness is a yoga and therapeutic massage studio in Edgemead, Cape Town, South Africa. We are the “responsible party” for the personal information described in this policy, as defined in the Protection of Personal Information Act 4 of 2013 (“POPIA”).

If you have any questions about this policy or how we handle your information, contact our Information Officer at info@serendipitywellness.co.za or on +27 79 085 6100.

We only collect the information we need to respond to you and provide our services:

• Contact form: your name, email address, mobile number and any message you choose to send.
• Retreat and studio updates: your name and email address, and a record of your consent, if you sign up to hear about future retreats, classes and offers. We only email you if you've ticked the consent box, every email has an unsubscribe link, and you can ask us to remove you at any time.
• WhatsApp, phone and email: your name, number or address, and what you tell us when you get in touch.
• Classes and treatments: details you share so we can teach or treat you safely, such as injuries, medical conditions or pregnancy. This is health information, which POPIA treats as special personal information. We only collect it with your consent and use it solely to keep your practice or treatment safe.
• Children: for Kids Yoga (ages 4 to 12) we collect information about a child only from their parent or legal guardian, with that person's consent.

Bookings and payments made through our booking site, booking.serendipitywellness.co.za, are handled as part of that service, and the information it needs is explained when you book.

With your permission, we use Google Analytics to understand how visitors find and use this website, for example which pages are visited, how long people stay, roughly where they are (city or region), the type of device and browser, and whether they contact us or click through to book. Google Analytics sets cookies to do this. The information is aggregated: we can't identify you from it, and we don't use it for advertising.

Analytics cookies are only set after you click “Accept” on our cookie banner. You can change your choice at any time using Cookie settings at the bottom of every page, or by clearing cookies in your browser. You can also install Google's Analytics opt-out add-on.

We do not use advertising cookies or track you across other websites. A small amount of information is saved in your browser to remember your cookie choice. Our hosting provider also keeps standard technical logs (such as IP address, browser type and the pages requested) for a short period to keep the site secure and running.

We use your personal information to:

• reply to your enquiries and messages;
• arrange, manage and confirm classes, treatments, retreats and events;
• adapt classes and treatments to your health and safety needs;
• keep records required for our business, tax and legal obligations.

We process your information because you have consented, because it is needed to provide a service you asked for, or because we have a legitimate interest in running our studio, as permitted by section 11 of POPIA. We do not sell your information or send you marketing unless you have asked to receive it, and you can opt out at any time.

We share personal information only with trusted service providers who help us run the website and studio:

• Vercel, which hosts this website;
• Resend, which delivers contact form messages to our inbox and stores the mailing list for our updates;
• Google, which provides Google Analytics if you accept analytics cookies;
• WhatsApp (Meta), if you choose to message us there.

These providers may store or process information outside South Africa, including in the United States. Where this happens, we rely on providers bound by data protection terms that offer protection comparable to POPIA, as required by section 72. We may also disclose information where the law requires it.

We keep personal information only for as long as we need it for the purposes above, or as long as the law requires (for example, financial records). Enquiries that do not lead to a booking are deleted when they are no longer needed. Health information is kept only while you attend classes or treatments with us, unless you ask us to delete it sooner.

We take reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access, including encrypted connections (HTTPS) on this website and restricted access to our records. If a security breach affects your information, we will notify you and the Information Regulator as required by POPIA.

Under POPIA you have the right to:

• ask whether we hold personal information about you, and request a copy of it;
• ask us to correct or update information that is wrong or out of date;
• ask us to delete information we no longer have a lawful reason to keep;
• object to how we process your information, or withdraw your consent at any time;
• lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

To use any of these rights, email info@serendipitywellness.co.za. We will respond within a reasonable time and may need to confirm your identity first.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

Serendipity Wellness, Edgemead, Cape Town, Western Cape, South Africa.
Email: info@serendipitywellness.co.za
Phone / WhatsApp: +27 79 085 6100
Or use our contact form.